Ubuntu
ntp package

Missing CVE fixes

Asked by Bryan Green

I am trying to verify that the following cve's have been fixed or mitigated in Precise and Trusty. They are all related to NTP.

CVE-2016-1547
CVE-2016-1548
CVE-2016-1550
CVE-2016-2516
CVE-2016-2518

They have all been fixed in Debian 7 and Debian 8.

Is there an easy way to find a list of CVE issues resolved per release?

Thanks

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu ntp Edit question
Assignee:
No assignee Edit question
Solved by:
actionparsnip
Solved:
Last query:
Last reply:
Revision history for this message
Best actionparsnip (andrew-woodhead666) said : 		#1

https://launchpad.net/ubuntu/+source/ntp/+changelog

Revision history for this message
Bryan Green (lispyone) said : 		#2

Thanks actionparsnip, that solved my question.

Revision history for this message
Manfred Hampl (m-hampl) said : 		#3

see https://people.canonical.com/~ubuntu-security/cve/
and https://people.canonical.com/~ubuntu-security/cve/pkg/ntp.html